One-qubit fingerprinting schemes 
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Fingerprinting is a technique in communication complexity in which two parties (Ahce and Bob) 
with large data sets send short messages to a third party (a referee), who attempts to compute 
some function of the larger data sets. For the equality function, the referee attempts to determine 
whether Alice's data and Bob's data are the same. In this paper, we consider the extreme scenario 
of performing fingerprinting where Alice and Bob both send either one bit (classically) or one qubit 
(in the quantum regime) messages to the referee for the equality problem. Restrictive bounds are 
demonstrated for the error probability of one-bit fingerprinting schemes, and show that it is easy to 
construct one- qubtt fingerprinting schemes which can outperform any one-bit fingerprinting scheme. 
The author hopes that this analysis will provide results useful for performing physical experiments, 
which may help to advance implementations for more general quantum communication protocols. 

PACS numbers: 03.67.Hk, 03.67.-a 



I. INTRODUCTION 

Fingerprinting is a useful mechanism for computing 
functions of large and distributed sets of data, by send- 
ing short messages called 'fingerprints' of the data to a 
third party for computation. The aim is to reduce the 
amount of communication, at the cost of some manage- 
able probability of error. 

The notion of fingerprinting arises naturally in the set- 
ting of communication complexity (see 1]). In the simul- 
taneous message passing model, which was introduced by 
Yao in his original paper on communication complex- 
ity 0, two parties (Alice and Bob) each have a piece 
of data represented by a string (a for Alice and /3 for 
Bob). They wish to compute some function / of their 
strings, f{a, (3). However, we constrain Alice and Bob in 
the following way: they may not communicate with one 
another, but they may each send one message to a third 
party (a referee) who will attempt to compute /(a, (3) 
using messages sent by Alice and Bob. It is assumed 
that Alice, Bob, and the referee have established some 
protocol which describes: 

• how Alice and Bob choose messages to send to the 
referee depending on their strings, and 

• how the referee interprets the messages in order to 
attempt to compute /(a,/3). 

In our scenario, we are assuming Alice and Bob do not 
have access to a common source of random bits. A sim- 
ple protocol in which Alice and Bob simply transmit (a 
binary representation of) their entire strings will suffice. 
The question that is asked is: how great a probability of 
success can they attain if they each transmit less infor- 
mation to the referee? We refer to the shorter messages 
that Alice and Bob send as fingerprints of their data. 
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In the case where Alice and Bob wish to compare their 
strings for equality, we may use f{a,(3) — 5^^ , which 
evaluates to if a = /3 and 1 otherwise. 

Performing fingerprinting using quantum information 
was first investigated for the asymptotic case in In 
that paper, it was shown that fingerprints of length 
O(logn) suffice for determining whether or not two n- 
bit strings are equal, with an error probability less than 
£ (for any constant e > 0) . This contrasts with the classi- 
cal case, where it is known that fingerprints of size f2(-\/n) 
are necessary for comparable performance Q • The result 
of Q is part of a sequence of results including |5|,(6| , where 
it has been shown that communication complexity can be 
reduced using quantum communication. Although these 
results demonstrate asymptotic savings, they do not ex- 
plicitly demonstrate savings in small instances that might 
be suitable for experimental implementations in order to 
verify the theory. For example, it is not clear that the 
significant quantum/classical communication separations 
shown in [3 and |^ hold for particularly small problem- 
size instances. 

In this paper, we examine very small instances of fin- 
gerprinting. Specifically, if Alice and Bob may only trans- 
mit one bit (or one qubit) of information to the referee, 
what can we say about the probability of success in de- 
termining whether a — (31 By analysing these very lim- 
ited instances of the quantum fingerprinting problem, we 
hope to provide results which will be easily tested by ex- 
periment, in order to help the development of implemen- 
tations for more general quantum communication proto- 
cols. 

It should be noted that Massar proposed a single 
particle fingerprinting scheme, in which a particle is sent 
either to Alice or to Bob (in superposition). Each party 
induces a relative phase on the state of the particle, af- 
ter which the two paths are interfered with one another. 
This scenario differs from the one considered here — for 
example, Alice and Bob share quantum information (the 
path taken by the particle) in addition to their input 
data (a and /?), whereas no such additional information 
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is available in the present scenario. 



II. PRELIMINARY DEFINITIONS 

Let S be the set of possible strings that Alice and Bob 
may have. We consider cases where jS"! > 2 (cases with 
\S\ < 2 are of course trivial to solve with one bit of 
communication) . 

Definition 1. Given the one (qu)bit messages from Al- 
ice and Bob, the referee will make a declaration (correct 
or incorrect) about whether or not their strings match. 

• If the referee declares that the strings match, we 
say that his decision strategy accepts the input it 
was given, and we call this a positive result; if this 
declaration is incorrect, we may call this a false 
positive. 

• If the referee declares that the strings differ, we 
say that his decision strategy rejects the input it 
was given, and we call this a negative result; if this 
declaration is incorrect, we may call this a false 
negative. 

Definition 2. Here are some definitions related to error 
probabilities. 

• For a given fingerprinting scheme, the error prob- 
ability of the scheme will refer to the worst-case 
probability of an incorrect result in that scheme. 

• A fingerprinting scheme with one-sided error is one 
where, if Alice and Bob have the same data string, 
the probability that the scheme will produce a false 
negative is zero. 



III. CLASSICAL ONE-BIT FINGERPRINTING 

In this section, we provide the definition of a one-bit 
fingerprinting scheme, and show that such schemes have 
quite limited power. Specifically, any one-bit fingerprint- 
ing scheme has an error probability of at least ^ (which 
is the same error probability that results from just a fair 
coin fiip by the referee). As well, any one-bit fingerprint- 
ing scheme with one-sided error has error probability 1 
(the same error probability that results if the referee al- 
ways declares that the strings match). Finally, any one- 
bit fingerprinting scheme that succeeds with high prob- 
ability when Alice's and Bob's strings match necessarily 
fails with high probability in OdS*]^) of the cases where 
their strings do not match. 

Definition 3. A one-bit fingerprinting scheme V op- 
erates as follows. To begin with, Alice and Bob receive 
inputs a, (3 € S, respectively. Each of them sends one bit 
to the referee, who produces an output bit based on these 
two messages. Each party may use a probabilistic strat- 
egy; however, there is no shared randomness among the 



parties. Such a scheme is characterised by three proba- 
bility distributions: 

• Alice's fingerprinting strategy {p^j^^gg , where p^ is 
the probability with which Alice sends the message 
1, depending on her string a G S . 

• Bob's fingerprinting strategy {q„}g.^g , where is 
the probability with which Bob sends the message 
1, depending on his string P £ S . 

• The referee's decision strategy {roo, t'oii ''lOj '^iijj 
where Tab is the probability with which the referee 
declares a positive result, depending on the bits a 
and b sent to him by Alice and Bob respectively. 

Definition 4. For any one-bit fingerprinting scheme V, 
define the function 



T'+{a,P) = (1 -p„)(l - ga)^oo + (l-p=)93?'oi 
+ P»(l - qi3)rio + Pa^qprii . 



(1) 



That is, V+{a,(3) is the probability that the scheme V 
yields a positive result when the input to Alice is a and 
to Bob is (i . 

We will usually want to place lower bounds on the 
probability of a positive result when a = (3 . This will 
have a strong impact on the overall performance of the 
scheme V . In order to simplify analysis, it will be useful 
to come up with a simple inequality. 

Lemma 1. For any one-bit fingerprinting scheme V , it 
is possible to define real-valued parameters , y^ , and 
de (depending on a,P € S and e € [0,1] respectively) 
such that 



V+{a,p) ^ {\~e). 



(2) 



Proof — Let a, (3 & S he strings such that V+{a, (3) ^ 
(1 — e) holds. We may expand the expression of 7^+ (a, (3) 
in Equation n as a polynomial in p„ and (7,,: this gives us 



{roQ-rQi - rw + rii)p^q,j + (rio - roo)p„ 

+ [rm - ro(i)q,i + roo ^ (!-£)■ 



(3) 



We would like to separate the dependency on a and j3: 
how we may do this depends on the value of c = (roo ~ 
roi - + ''ii) • 

• If c 7^ 0, we may define the parameters , y^ , and 
as follows: 



roo 



d. 



9,a 
(1 



rio 



c 

roo 



(4) 



(^-oo - r 01) {roo - rio) 



roo ■ 



Then, the inequality x^ ^ holds, as it is equiv- 
alent to Equation 13 
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• If c = 0, we may drop the cross-term in and (7^ 
from Equation 13 



(5) 



As the exponential function (a; 1 — > e^) is mono- 
tone increasing, the inequaUty will be preserved if 
we exponentiate both sides. Doing this yields 



(6) 



In this case, we may define the parameters , y^i , 
and as follows: 



— g('"oi-roo) 



(7) 



- e - roo 



Then, we have the inequality ^ 



In both cases, the parameters are defined so that if 
V{a, (3) ^ (1 — e) , the inequality x„ > d^ holds. For 
the converse, suppose that x^ Vfi ^ de for two particular 
strings a, (3 € S. By simply applying the definitions of 
, Hji , and (and taking the logarithms of both sides 
if c = 0), we can immediately recover Equation 01 Thus, 
the converse holds as well. ■ 

The parameters x^, y^, and d^ do not necessarily re- 
fer to any obvious properties of the scheme V. How- 
ever, using them, we may easily prove very restrictive 
upper bounds on the effectiveness of one-bit fingerprint- 
ing schemes: 

Theorem 1. LetV be a one-hit fingerprinting scheme. 
If e is an upper bound for the worst-case probability that 
V produces false negatives, then (1 — e) is a lower bound 
on the worst-case probability that V will produce false 
positives. 

Proof — Because the probability of a false negative 
is at most e, we have 7^+(cr, cr) ^ (1 — e) for all strings 
CT e S*. Then, by Lemma we also have x„ y„ ^ d^ for 
all (T E S. Consider an alternative definition of the 'sign' 
function: 



sgna;„ 



1 , x^^O 
-1, x„<0 



(8) 



As there are two possible values for the 'sign' function, 
and more than two elements in S, there must then be 
at least two distinct strings E S such that sgnx^ — 
sgn . Without loss of generality, we may choose /i and 
V such that {sgnx^) ^ (sgnx^) y^;. Then we have 



x^, yu ^ a;^ ^ 4 



(9) 



Again by Lemma ^ we then know that V+{ijl,v) ^ 
(1 — e). As yU and v were chosen to be distinct, the worst- 
case probability of a false positive for the fingerprinting 
scheme V is then at least (1 — e). ■ 



Corollary 1-1. Any one-hit fingerprinting scheme has 
error probability at least i. 

Corollary 1-2. Any one-sided error one-bit finger- 
printing scheme has error probability 1. 

Not only are there lower bounds on the worst-case 
probability of failure, but there is also a lower bound 
on the number of inputs which are likely to produce a 
false positive: 

Theorem 2. LetV be a one-bit fingerprinting scheme, 
and let \S\ — s. If the worst-case probability of obtaining 
a false negative is at most e in V, then the number 
of inputs (a, P) G S x S such that a ^ (3 and V+{a, (3) ^ 
(1 — e) is at least j{s'^ — 2s). 

Proof sketch — This follows by considering the argu- 
ments from Theorem n We may establish a lower bound 
by counting the number of unordered pairs {«,/?} such 
that sgna;„ — sgnx^ and a ^ (3. This is minimized if 
nearly half of the strings a £ S have sgna;„ — 1, and 
nearly half again have sgna::„ = — 1. If this is the case, a 
simple counting argument shows that the number of such 
(unordered) pairs is 2(''^^) = \{s'^ — 2s) for s even, and 
j(.+i)/2) ^ ((.-i)/2^ - i(s2 - 2s + 1) for s odd. ■ 

So, one is forced to accept one of two scenarios in a one- 
bit fingerprinting scheme: one must either forego a rea- 
sonable upper bound on the probability of error when Al- 
ice's and Bob's strings match, or use a scheme which will 
produce false positives with high probability for about 
■J or more of Alice's and Bob's possible inputs (strictly 
more than the number of matching cases when \S\ > 6 ). 



IV. QUANTUM ONE-QUBIT 
FINGERPRINTING 



In this section, we provide the definition of a one- 
qubit fingerprinting scheme, give examples of one-qubit 
schemes that outperform what classical one-bit finger- 
printing schemes can achieve, and give some upper and 
lower bounds for the performance of schemes with one- 
sided error. 

Definition 5. A one-qubit fingerprinting scheme Q op- 
erates as follows. To begin with, Alice and Bob receive 
inputs a,l3 G S, respectively. Then each of them sends 
one qubit to the referee, who produces an output bit 
based on these two qubits. There is no a priori shared 
information among the parties. Such a scheme is charac- 
terized by three components: 

• Ahce's message set {p^}^^g , where p„ is the one- 
qubit (possibly mixed) state that Alice will prepare 
and send to the referee, depending on her string a. 

• Bob's message set {t^}^^^ , where is the one- 
qubit (possibly mixed) state that Bob will prepare 
and send to the referee, depending on his string (3. 



4 



• The referee's decision strategy, which is some two- 
outcome measurement of the two-qubit state p„ (g) 
Tff , possibly using some finite number of ancilhary 
qubits. 

The inputs recieved by the referee fall into two classes: 
matching states, which are states of the form p„ (g) r„ 
for some a £ S, and hybrid states, which are states of 
the form p„ (g) for a ^ (3. The goal of the referee 
is essentially to attempt to distinguish matching states 
from hybrid states. 

A. Some one-qubit fingerprinting scliemes 

In this section, we give examples of one-qubit finger- 
printing schemes that outperform any possible classical 
one-bit scheme. 

The basic framework that we^use for constructing fin- 
gerprinting schemes is that of 3] : construct a set of pure 
fingerprint states with small pairwise inner product and 
then apply a controlled-SWAP test. 

Theorem 3. Let Q he a fingerprinting scheme with the 
following characteristics: 

• Alice and Boh hoth use the same set of pure states 
{ l'^-')} g5 fingerprints, such that for all a, (3 

S with a ^ (3, \ | i^i^) | ^ 5 ; 

• The referee's decision strategy is to compute the 
state 

{H®I®I) c-SWAP {H®I®I) |0) \(t)p) , (10) 

measure the first quhit, and declare a negative result 
iff the result is 1 . 

Then Q is a one-sided error fingerprinting scheme, with 
error prohahility at most 

Using this framework for one-qubit fingerprinting 
schemes, the task is to find sets of one-qubit fingerprint 
states such that their pairwise inner product is as small 
as possible. Using the Bloch sphere representation for 
qubit states, this reduces to finding points on the Bloch 
sphere which are as widely separated as possible. For in- 
stance, for 15*1 =4, one would use the vertices of a regular 
tetrahedron inscribed within the Bloch sphere, such as 

\M = |o) 

I'^i)^ 73(10) + V2\l)) 

m = j^{\0) + 6^-/3^2 |1)) 

l'^^)- 75(10) + c^Wa^ii)) . 

The inner product of any two of these states is ^ in ab- 
solute value. Similarly, for jS"! = 3 one would use the ver- 
tices of an equilateral triangle, and for jS"! = 6 one would 



use the vertices of a regular octahedron. The (maxi- 
mal) absolute value of the inner product of two states 
are ^ and , respectively, in the latter two cases. For 
IS*! = s » 1, there exists a collection of s states whose 
maximal pairwise inner product is 1 — 0{-) in absolute 
value (this may be shown using a simple geometric ar- 
gument, by considering the area available to be used in 
distributing the states on the Bloch sphere). 

Using these figures for the magnitude of the inner prod- 
uct in various cases, we may use Theorem|31to construct 
fingerprinting schemes with one sided error, each of which 
outperforms any possible one-bit fingerprinting scheme 
with one-sided error. The error probabilities for these 
schemes are presented in Tabled below. 

Any one-sided error fingerprinting scheme with error 
probability e can be converted into a general (two-sided 
error) scheme with error probability , as follows. Af- 
ter running the one-sided error scheme, if the result is 
positive, we change the result to negative with proba- 
bility . It is straightforward to verify that the re- 
sulting (two-sided) error probability will be . Using 
this observation, we can determine the error probabilties 
for one-qubit fingerprinting schemes with two-sided er- 
ror, each of which again outperforms any possible one-bit 
fingerprinting scheme with two-sided error. These error 
probabilities are also presented in Tabic HJ 



\s\ 


Maximal 
inner product 


Error probability 
(1-sided error) 


Error probability 
(2-sided error) 


3 
4 
6 

s > 1 


1 
2 
1 

%/3 
1 
V2 

i-o(i) 


1 = 0.625 
1 0.667 
f = 0.750 


^ ^ 0.385 
1 = 0.400 
f ^ 0.429 

^-o(i) 



TABLE I: For \S\ = 3, 4, 6, and the asymptotic case s » 
1, the error probabilities for some one-qubit fingerprinting 
schemes in the framework of [3. 



Note that the one-sided error probabilities are all 
strictly less than 1, and the two-sided error probabilities 
are all strictly less than ^ , neither of which are possible 
for one-bit fingerprinting schemes (by CoroUarv 11-21 and 
Corollary 11-11 respectively) . 

B. Error probabilities in one-qubit fingerprinting 
schemes 

In this section, we give some upper and lower bounds 
on the error probabilities of one-qubit fingerprinting 
schemes with one-sided error. In doing so, we obtain re- 
sults which imply that when Alice's choice of fingerprint 
states is evenly distributed on the Bloch sphere, the op- 
timal one-qubit scheme is symmetric (that is, where Al- 
ice and Bob use the same fingerprint states). We also 
show that there are choices of fingerprint states for Alice 



5 



where a symmetric scheme is not optimal, and discuss 
necessary conditions which must hold for a symmetric 
scheme to be a sub-optimal choice. These results suggest 
that for even such a small instance of quantum finger- 
printing, the question of finding an optimal scheme for 
a fixed value \S\ is not simple: in particular, analysis in 
the general case does not lend itself to simple arguments 
by symmetry. 

It will be useful to define some additional notation. 
Throughout this section, for a one-qubit fingerprinting 
scheme Q, we represent the worst-case probability of a 
false negative by Wq, and the worst-case probability of 
a false positive by Wq. 



1. One-quhit fingerprinting with one-sided error 

As we saw in section liiil a one-bit fingerprinting 
scheme with one-sided error will have an error probability 
of 1. Because we have no interest in one-qubit schemes 
with this error probability, we will use the following ter- 
minology: 

Definition 6. A fingerprinting scheme is strict if it 
has one-sided error {Wq = 0) and an error probability 
strictly less than 1 {Wq < 1). 

In a strict one-qubit fingerprinting scheme Q, the ref- 
eree's decision strategy must accept any matching state 
(g) T„ (for a E S). This leads to a natural definition: 

Definition 7. The accept space Aq of a one-qubit fin- 
gerprinting scheme Q is the set of two-qubit pure states 
I7), such that the referee's decision strategy would pro- 
duce a positive result with certainty if it were provided 
the input I7) (regardless of whether I7) is a product of 
fingerprint states from Alice and Bob). 

The accept space is a vector space: if the referee's 
strategy accepts two distinct two-qubit states I7) and 
1 7') with certainty, by linearity it must accept any linear 
combination of I7) and I7'). 

In order to be accepted with certainty, each matching 
state must be a (possibly trivial) mixture of states in the 
accept space. So, it is natural to try to understand a 
fingerprinting scheme Q in terms of Aq . One question 
which bears interest is how large the accept space can be 
for a strict one-qubit fingerprinting scheme. 

Tiieorem 4. If Q is a strict one-qubit fingerprinting 
scheme, then diia Aq — 3. 

Proof sketch — First, it is useful to note that nei- 
ther Alice nor Bob can use one fingerprint state for two 
distinct data strings: this would lead immediately to the 
existence of a matching state (which must be accepted 
with certainty) which is identical with some hybrid state 
(which must not be accepted with certainty) . So, each of 
Alice's fingerprint states must be distinct from one an- 
other, and similarly for Bob. We may then prove the the- 
orem by eliminating every other possible value of dim Aq . 



The fact that both Alice and Bob must use distinct fin- 
gerprints for distinct input strings implies dimAg > 1 . 
Using arguments of linear independence, it is possible to 
show that if Alice or Bob use mixed states for finger- 
prints, then dimylg > 2. On the other hand, if Alice 
uses the pure states |0„) and Bob uses the pure states 
for a Cz S, we can determine that dim Aq > 2 from 
the fact that the equation 



Cl +C2 



cannot be satisfied for any ci , C2 G C for any three strings 
e S (the state on the left-hand side being both 
a product state and linearly independent from both of 
the states on the right-hand side individually). Finally, 
because there must be a non-zero probability of rejecting 
hybrid states, we must have dimAg < 4. Thus we have 
dim Aq — 3, as required. I 

This restriction on the nature of Aq has some strong 
implications about what states Alice and Bob may use 
for fingerprints. The simplest is as follows: 

Theorem 5. In a strict one-qubit fingerprinting 
scheme, Alice and Bob must use pure states for finger- 
print states. 

This result is easy to demonstrate: the proof can be 
found in the appendix. On the other hand, this result 
is not clearly trivial — without this theorem, there is no 
immediately obvious reason to exclude mixed quantum 
fingerprinting schemes, even for reasons of optimality. 
(In the classical scheme where we allow arbitrary length 
fingerprints, ^ provides a mixed fingerprinting strategy 
which provides optimal performance for a classical finger- 
printing scheme.) In consideration of Theorem|5l we will 
use the pure state \(f>„) to describe Alice's fingerprint for 
a e S, and \^^) to describe Bob's fingerprints, for a e S, 
in any strict one-qubit fingerprinting scheme. 

For a strict scheme Q, we may consider the set of two- 
qubit states which are perfectly distinguishable from the 
matching states. Because the accept space defined by 
the matching states is of dimension 3, there will be pre- 
cisely one such state, which we denote by \Rq). Being 
orthogonal to the accept space, it is the two-qubit state 
which the referee's decision strategy would be most likely 
to reject. As a result, we call \Rq) the reject state of 
Q. Although it is possible for the referee's strategy to 
accept the state \Rq) with non-zero probability, an opti- 
mal choice of decision strategy for the referee is to reject 
\Rq) with certainty. 

Tiieorem 6. Let C be a (non-empty) collection of 
strict one-qubit fingerprinting schemes, characterized by 
some choice of fingerprint states { \<j>„)} for Alice and 
{ IV'.j)} g5 for Bob. Let A be the accept space defined by 
these fingerprint states, and \R) the corresponding reject 
state. Then for any Q G C , 



W? 



^ 1 — min 



{R\ ( !</.„) ® 



(11) 
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with equality when the referee's decision strategy is to 
project \(f)^) lipi^) either into A or onto \R) using a mea- 
surement, returning a negative result iff the result of this 
measurement is \R). 

Proof — That the strategy described above yields a 
strict one-qubit fingerprinting scheme is trivial: we will 
show that this is the optimal decision strategy for the 
referee. Whatever the referee's decision strategy may be, 
it must attempt to distinguish between the hybrid states 
and the accept space without having specific knowledge 
about the input he receives. Any such strategy can be 
described by a two- valued POVM {E+ , E-} , where E+ 
and E- corresponds positive and negative results respec- 
tively. For any state € A, we require 



tr = 0, 



(12) 



which implies E- = p \R){R\ for some probability p ^ 0. 
Then, the POVM which describes the referee's strategy 
is equivalent to a partial projective measurement (either 
onto the the state \R) or into the space A), followed by 
a biased coin-flip to decide whether to produce a neg- 
ative result should the state collapse to \R). In order 
to achieve the greatest probability of distinguishing hy- 
brid states from the accept space, we may choose to fix 
p = 1. The strategy that we obtain is then precisely the 
one described by the theorem. ■ 

The reject state can be a useful tool for analysis. For 
instance, consider the Schmidt decomposition of \Rq), 
which can be expressed as 



\Rc 



(|77o)|«o) - C|77i)|^i)) (13) 



for some orthonormal bases { I770) , and 
{ |ko) , |ki)} of C^, and some real coefficient C > 0. 
(Because Alice and Bob are not allowed to use the 
same fingerprint state for different strings, it is simple 
to show that C 7^ , and we may absorb any relative 
phase into the definitions of I771) and |ki) .) Let 
U = |0)(%| -t- |l)(r;i| and V = |l)(^«ol + |0)(ki| . Then, 
we have 



iU(g>V)\RQ) 



(|01)-C|10)) (14) 



As a part of his decision strategy, the referee can per- 
form the transformation U i^V as the first step, without 
loss of generality. However, because U (E)V can also be 
carried out without communication by Alice and Bob 
as the last part of the preparation of their fingerprint 
states, Q is equivalent to a different one-qubit scheme 
Q', where Alice and Bob use the fingerprints U and 
V (respectively) for the string a E S rather than 
and , and where the reject state is {U(^V) \Rq) 
rather than \Rq)- For the sake of brevity, we will call a 
strict scheme Q canonical if the reject state is given by 
\Rq) = -^=i=5 ( |01) - C |10)) for some C > 0. For any 
strict scheme Q , we will call the canonical fingerprinting 



scheme which is equivalent to Q the canonical form of 
Q. 

Given the canonical form of Q , we can easily describe 
a relation between Alice's and Bob's fingerprint states. 
We can express and lip^) in the form 



10. 
1^. 



1 



|0) 



11; 



1 



(15) 



for some complex constants Us,Ws G C. (For — 
|1) , we may take the limit — > 00 , and similarly for 
I?/;.) -Y Using the expression in Equation [HI for \Rq) , 
from {Rq\ ( 10.) ® ji/'^)) = 0, we can then determine 

w„ (01 1 01) - Cu„ (10 1 10) = 
=^ w„ — Cu„ . 



(16) 



(This equation extends appropriately in the limit 
, 00 in the sense that |(/)„) will approach 

|11) , which is an element of Aq.) Then, if the reject state 
\Rq) of a strict one-qubit scheme Q is known, one can 
determine Bob's fingerprints from Alice's fingerprints, us- 
ing the canonical form of Q. One can then characterize 
a strict one-qubit fingerprinting protocol by its' reject 
state \Rq) , the probability with which the referee re- 
jects \Rq) , and Alice's choice of fingerprint states. 

Using this observation, we can also determine useful 
information about a strict one-qubit scheme from only 
Alice's or only Bob's fingerprint states, along with the 
parameter C used to define the reject state. 

Theorem 7. Let Q be a strict one-qubit fingerprint- 
ing scheme, where Alice's fingerprint states are given 
by { |0.)}^gs o-nd Bob's fingerprint states are given by 
I IV'.)} • For the sake of brevity, define the hybrid 
state \h^ff) — \(f)^) l^fi) for each a ^ [3. Then, there is a 
collection of positive real constants {K„}^^g such that 



{Rq\K 



KrAl 



(17) 



for all a, P £ S . 

With this result, knowledge of the constants K„ for 
a E S allows one to easily determine the probability that 
any hybrid state will be projected onto \Rq) , using only 
Alice's fingerprints. The proof of Theorem[7|is left to the 
appendix; for schemes Q in canonical form, the parame- 
ter Kcr can be given as a function of C, and the extended 
real number Ua- which defines Alice's state |0„) : 



(1 + C2|uj^)(l + C2) 



(18) 



^ To ensure that this is meaningful, we take care to observe that 
expressions involving \ua \ and \wa \ extend in an appropriate way 
under this Umit. 



7 



(As oo , this formula converges to ■) It is 

easy to show that, as a function of , K„ is constant for 
C ~ I , monotone increasing for C < 1 , and monotone 
decreasing for C > I . Of particular interest is the locus 
of possible values of u„ where K„ = i ■ it is simple to 
show that for any value of C, this set of points will be 
the circle of radius about the origin. 

By considering this formula for , we can begin to 
try finding an optimal strict fingerprinting scheme (by 
optimising the value of C) based on Alice's fingerprint 
states, and vice-versa. We will describe some ideas of 
how this may be done in the following section. 

2. Strict symmetric fingerprinting schemes 

Fingerprinting schemes where Alice and Bob use the 
same states as each other for their fingerprints are a nat- 
ural class of fingerprinting schemes to consider. All of 
the results obtained in the previous section hold for the 
special case of strict symmetric one-qubit fingerprinting 
schemes: in this section, we will elaborate on some of the 
results for this special case, and discuss when a symmet- 
ric scheme is an optimal choice of one-qubit fingerprinting 
scheme. 

It is easy to verify that, for a symmetric scheme, 
\Rq) — |^'~)- Theorem then effectively reproduces 
the controUed-SWAP decision strategy of Theorem O as 
I^P") is a —1 eigenstate of the SWAP operation, and the 
other eigenstates of swap have the eigenvalue As 
well, \Rq) = |^~) gives us C = 1 for Q, which implies 
that K„ = i for all a E S. Theorem [7| then simplifies to 



The probability of rejection obtained is then consistent 
with the results of fl- 

Considering as a function of C and u„ , the value 
C = 1 is the only value for which K„ is not strictly in- 
creasing or strictly decreasing. As a result, the choice 
C = 1 plays a somewhat special role in the analysis of 
strict one-qubit schemes. One approach to examining 
one-qubit fingerprinting schemes is to fix Alice's distri- 
bution of fingerprints, and try to determine which value 
of C leads to the best error probability for the scheme as 
a whole. Under some reasonable assumptions on Alice's 
choice of states, the value C = 1 (and thus, a symmetric 
scheme) is optimal. However, this is not true under more 
general assumptions. 

Suppose Alice has some fixed choice of fingerprinting 
states. Among Alice's fingerprints, there will be some 
pair of states \(j>a) , I'Pfi) which have the largest inner 
product of any pair. For one-qubit schemes in canoni- 
cal form, in order for an asymmetric scheme to perform 
better than a symmetric scheme, we require , Kfj > i 
for this pair of a and /3. This is possible only if both u„ 
and lie within a circle of radius about the origin 



on the complex plane for C > 1, or outside such a cir- 
cle for C < 1. Either of these constraints on the values 
of and is equivalent to the states and 
lying within some circle of lattitude, either closer to |0) 
or to on the Bloch sphere. Then, the closer such a 
minimally distinguishable pair lies to the equator of the 
Bloch sphere, the closer C must be to 1 for these criteria 
to apply, and so the closer the optimal scheme will be to 
symmetric. 

Using this observation, we can determine some neces- 
sary criteria on Alice's choice of fingerprints, in order for 
a symmetric scheme to be suboptimal for that choice. For 
a minimally distinguishable pair of states and 
of Alice's, if 

• one of the pair lies on the equator of the Bloch 
sphere, 

• the two states lie on opposite sides of the Bloch 
equator, or 

• two such pairs of minimal distinguishability lie on 
opposite sides of the Bloch equator, 

then it is easy to show that a symmetric protocol is op- 
timal. (In particular, for a scheme where Alice's states 
are optimally spaced on the Bloch sphere, the latter two 
conditions will most likely apply.) In order for C > 1 
to be optimal, we then require and to both lie 
within a circle of radius on the complex plane, and 
for I {(j)^ 10^) I to be strictly larger than the inner product 
of any other pair. For C < 1 to be optimal, we have 
similar requirements, except that u„ and Ufj must both 
lie outside the circle of radius C^^ on the complex plane. 

It is easy to find simple choices of fingerprint states 
for Alice where a symmetric scheme is not optimal. One 
example would be where S = {0,1,2}, and we define 
Alice's states by the complex parameters 

Mo = ; Ml = 2 ; U2 = —2 . 

In this case, the minimally distinguishable pair would be 
|0i) and 1^2) with an inner product of |, compared to i 
for the other two possible pairs. Using Theorem [7| with 
the value K„ — ^ for all cr G S, a symmetric scheme Q 
with this choice of fingerprints for Alice would have error 
probability ^ = 0.68 . However, the points and U2 
both lie outside the circle of radius on the complex 
plane, for any ^ < C < 1. In particular, consider a 
scheme Qa where C = This choice of C will yield 

The higher values for Ki and K2 improve the probability 
of error in the worst case at the cost of the probability 
of success in other cases. Using Theorem [7| once more, 
we may determine the probability of error when a — 1 
and /3 = 2 to be II « 0.644 . It is easy to determine 
that this is the error probability of Qa- Although this is 
not an improvement on the error probability of the strict 
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protocol for \S\ = 3 presented in Tabled this is better 
than in the symmetric protocol Qs- Then, for this choice 
of fingerprint states for Alice, the scheme Qa has a better 
worst-case probability of error than a symmetric scheme. 

In general, evenly spacing Alice's states on the Bloch 
sphere will lead to a symmetric fingerprinting scheme be- 
ing the optimal choice, because there will not be a unique 
pair with maximal inner product, and the distribution of 
minimally distinguishable pairs will be essentially sym- 
metric on the Bloch sphere. However, for an arbitrary 
distribution of Alice's states, a symmetric protocol is not 
optimal, and it appears difficult to show that evenly spac- 
ing states on the Bloch sphere is an optimal choice with- 
out first assuming a symmetric scheme is to be used. 

V. CONCLUSION 

We have shown that fingerprinting schemes that make 
use of only one-qubit messages from Alice and Bob to 
the referee can perform better in the worst case than is 
possible for any similar classical communication scheme 
using single bit messages. This result holds whether one 
requires one-sided error (with no false negatives) or one 
allows two-sided error probabilities. 

For a one-bit fingerprinting scheme, one can never 
achieve a better worst-case performance than blind guess- 
ing, and one-sided error schemes have error probability 
1. The number of inputs for Alice and Bob where the fin- 
gerprinting scheme performs "badly" (with a high lower 
bound on the error probability) either includes all inputs 
where Alice's and Bob's string match, or a sizeable frac- 
tion of the other possible inputs. 

In the quantum case, while some lower bounds exist, 
upper bounds for error probability can also be easily de- 
rived for one-qubit fingerprinting schemes with one-sided 
error, and can be determined from the fingerprint states 
of either Alice or Bob alone if the reject state is known. 
Using these techniques, it is possible to show that there 
are choices of fingerprints for Alice, for which the opti- 
mal one-qubit scheme is not symmetric. However, if it is 
assumed that Alice distributes her states as evenly over 
the Bloch sphere as possible, a symmetric scheme is quite 
likely the optimal scheme. 

It is more difficult to make clear statements one-qubit 
fingerprinting schemes with two-sided error. Although it 
is easy to find ones with reasonably low error probability 
by converting one-sided error schemes, the structure of 
strict schemes is lost: the freedom to reject matching 
states with some probability makes simple arguments by 
linearity difficult to find. 
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APPENDIX: DEFERRED PROOFS 

We will now present the two results from the analysis 
of strict one-qubit fingerprinting schemes whose proofs 
were deferred. 

To prove Theorem |5| we will use a number of ideas 
introduced originally after the theorem: namely, the idea 
of the reject state (defined on pagelSJ, and the idea of 
the canonical form of a strict protocol Q (presented on 
page Ell. These two ideas do not depend on Alice's and 
Bob's fingerprint states being pure states. We would also 
like to use the linear relation of Equation 1161 which we 
will briefiy re-derive here. 

Proof of Theorem [3| — Without loss of generality, 
Q is in canonical form. Then, let C be a positive real 
such that 

\Rq) = ^ji^(|oi)-c|io)) 

holds. Next, consider a product state 1^)1^) G Aq . We 
may represent the state \u) and \w) in the form 

- 7T^(lo>+-li>)' 

for some complex constants u,w G C. As 
{Rq\ ( \u) (g) \w)) = 0, we can then determine 

t«(01|01) -Cu(10|10) = 
w = Cu . 

Considering this, let p„ (g) r„ be some matching state of 
Q. Suppose that Alice uses a mixed state for p„ . Then, 
let p„ be some mixture of the states 

l<^.> = ^(10) + .. ID) 

i<^:> = ^(io)+<ii)), 

and let t„ be a (possibly trivial) mixture including the 
state 

m = ^^(io)+™ji)) 

Because |</)„) and \ip^) are both in Aq , it must 
be that w„ = Cu„ and w„ = Cu'^ . This is only possible 
if = u'^ , so that \(j>^) = |(/)^). Then, p„ is a pure state. 
A similar analysis holds for Bob. ■ 

Next, we present the proof of Theorem [7| Implicit in 
the proof for the case where , S C is a derivation of 
the formula for K„ for canonical schemes that was shown 
previously, in Equation 1181 
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Proof of Theorem — Without loss of generality, 
let Q be in canonical form. Let a ^ (3, and let 

\Rq) = 7T^(|01)-C|10)) , 

as before. We may express 10^) and \4>(i) in terms of 
(extended) complex numbers, as in Equation 1151 for in- 
stance, we have 



\<t>.) = 



and similarly for li/)^). In the case where = 
we set Ua = oo (using the one-point compactification of 
C). We may then use Equation^] to determine Bob's 
fingerprint states: for instance, 



and similarly for \ip^). Then, we will show that Equa- 
tion El is satisfied for 



cm 



(19) 



(1 + C2|u„|^)(l + C2) 
oo, this expression has a well-defined 



In the case u, 
limit of K„ = ^j^iji . 

We have three cases: ^ oo (in which case G C), 
Ufj = oo (in which case G C), and Uc,Uf3 G C. The 
first two cases are easy to prove; the last case of u^, ,Ub & 
C requires a little more analysis. Consider the value of 

I (0.10c) I': 

l^'^^l'^-^l - (i+K|^)(i+|„,|=) ■ 



By subtracting both sides of the equation from 1, we 
obtain 



1 



_ {l + Ua*Ua){l+Uil'ufj) — ( 1 + tig * ) ( 1 + Mq * ) 

(l + |«c|")(l + |«3p) 
(l + |n.|^)(l + |«^|^) ' 



from which we conclude 



1 - 



(20) 



We will make use of this equality in our analysis of 
I {RqIIt.^^) |. We may expand the expression for \h^p) 
in terms of the standard basis: 



|00) + CtialOl) + ticllO) + Cu^Ufilll) 



Taking the inner product with \R), and squaring the 
absolute value, we obtain 



(21) 



\{Rq\K,)\ - (i+|„„|2)(i + c=|«,,|^)(i+c2) 
Applying Equation I20L we can perform a substitution to 



obtain 



The theorem then holds. 
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